CLI tool and library for generating a Software Bill of Materials from container images and filesystems
-
Updated
Sep 30, 2026 - Go
#
sbom
Here are 195 public repositories matching this topic...
The Airgap Native Package Manager for Kubernetes
government docker kubernetes helm docker-registry oci k8s cloud-native dod hacktoberfest airgap gitops kustomize sbom k3s cosign
-
Updated
Sep 30, 2026 - Go
GUAC aggregates software security metadata into a high fidelity graph database.
security graph supply-chain vulnerability vex spdx vulnerability-management software-supply-chain supply-chain-analytics sbom attestations in-toto cyclonedx slsa supply-chain-security supply-chain-visibility software-supply-chain-security spdx-sbom cyclonedx-sbom
-
Updated
Sep 29, 2026 - Go
OpenClarity is an open source platform built to enhance security and observability of cloud native applications and infrastructure
kubernetes security cloud virtual-machine scanner malware supply-chain exploits vulnerabilities rootkits leaked-secrets sbom
-
Updated
May 25, 2026 - Go
OpenSCA is an open source software supply chain security solution that supports the detection of open source dependencies, vulnerabilities and license compliance with a widely noticed accuracy by the community.
security spdx software-supply-chain sca swid devsecops software-composition-analysis software-bill-of-materials license-compliance sbom cyclonedx software-supply-chain-security
-
Updated
May 15, 2026 - Go
Graphing SBOM's Fast.
-
Updated
Aug 29, 2025 - Go
Scans Software Bill of Materials (SBOMs) for security vulnerabilities
golang security oss supply-chain spdx vulnerability-scanners security-automation security-tools devsecops supplychain syft sbom gomodule cyclonedx epss
-
Updated
Feb 10, 2026 - Go
SDLC evidence store and policy engine for your Software Supply Chain attestations, SBOMs, VEX, SARIF, QA reports, and more
security open-source-licensing compliance license spdx attestation devsecops ospo oss-compliance sbom in-toto cyclonedx slsa supply-chain-security sbom-distribution slsa-provenance metadata-platform sbom-discovery regulated-industry
-
Updated
Oct 1, 2026 - Go
A scanner for end-of-life (EOL) software and dependencies in container images, filesystems, and SBOMs
security nist pci-dss compliance eol fedramp outdated-packages end-of-life outdated-libraries sbom release-policy outdated-dep
-
Updated
Jun 25, 2026 - Go
sbomqs: The Comprehensive SBOM Quality & Compliance Tool
go golang spdx security-tools sbom cyclonedx devsecops-pipeline supply-chain-security sbom-examples sbom-tool sbom-quality sbom-score sbom-samples
-
Updated
Sep 21, 2026 - Go
Catalogue all images of a Kubernetes cluster to multiple targets with Syft
-
Updated
Oct 1, 2026 - Go
A license scanner for container images and filesystems.
-
Updated
Oct 1, 2026 - Go
Trusted builds made easy! A cloud-native software factory for building, testing, and releasing trusted software artifacts
go kubernetes ai supply-chain ci-cd oci cloud-native sbom tekton slsa supply-chain-security sigstore
-
Updated
Oct 1, 2026 - Go
Creates CycloneDX Software Bill of Materials (SBOM) from Go modules
golang owasp bom vex bill-of-materials software-bill-of-materials go-modules sbom sbom-generator obom mbom saasbom
-
Updated
Sep 23, 2026 - Go
Utility that provides an API platform for validating, querying and managing BOM data
owasp bom vex vdr spdx spdx-license hacktoberfest bill-of-materials software-bill-of-materials purl package-url sbom cyclonedx obom mbom saasbom spdx-sbom sbom-tool sbom-quality
-
Updated
Sep 24, 2026 - Go
Format agnostic SBOM tooling
-
Updated
Nov 20, 2025 - Go
Git-native collaboration platform
git go social cli serverless decentralized s3 tui rpc kanban scrum object-storage bubbletea sbom cross-forge forgeless
-
Updated
Oct 1, 2026 - Go
Add this topic to your repo
To associate your repository with the sbom topic, visit your repo's landing page and select "manage topics."